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Abstract 

The problem of unambiguous state discrimination consists of deter- 
mining which of a set of known quantum states a particular system is in. 
One is allowed to fail, but not to make a mistake. The optimal procedure 
is the one with the lowest failure probability. This procedure has been 
extended to bipartite states where the two parties, Alice and Bob, are 
allowed to manipulate their particles locally and communicate classically 
in order to determine which of two possible two-particle states they have 
been given. The failure probability of this local procedure is the same as 
if the two particles were together in the same location. Here we examine 
the effect of restricting the classical communication between the parties, 
either allowing none or eliminating the possibility that one party's mea- 
surement depends on the result of the other party's. These issues are 
studied for two-qubit states, and optimal procedures are found. In some 
cases the restrictions cause increases in the failure probability, but in other 
cases they do not. Applications of these procedure, in particular to secret 
sharing, are discussed. 

1 Introduction 

Suppose that we have a two-qubit state, and we give one of the qubits to Alice 
and the other to Bob. Alice and Bob know that the state is either |^'o) or l^*!), 
and by making local measurements and communicating classically, they want to 
determine which state they have. We want to consider the case of unambiguous 
discrimination, which means that Alice and Bob may fail to decide which state 
they have, but if they succeed, they will not make an error. That is, they will 
never conclude that they have |5'o) when they have been given l^"!) and vice 



1 



versa. Our object is to develop a procedure that Alice and Bob can use to 
discriminate between the states. 

One aspect of this problem has already been solved. If each state is equally 
likely and and both qubits can be measured together, then it is known that 
the states can be successfully unambiguously discriminated with a probability 
of Pidp = 1 — K^'ol^i)! [|l|"lH- It recently shown that the states can be 
discriminated using only local operations and classical communication (LOCC) 
with the same success probability. Walgate, et al. proved that if (5'o|^i) — 0, 
then the states can be distinguished perfectly using only LOCC ||]. The case 
when l^'o) and l^^i) are not orthogonal was investigated numerically by Virmani, 
et al. 1^, and they found strong evidence that unambiguous discrimination is 
possible with a probability of Pidp using LOCC. In addition, they found a class 
of states for which they could prove that this was true. A proof that this is true 
for all bipartite states was provided by Chen and Yang Q. 

The procedure that makes LOCC unambiguous discrimination with a success 
probability of pidp possible is the following. Alice makes a projective measure- 
ment on her particle that gives her no information about whether the state is 
l^'o) or l^*!), and she then communicates her result to Bob. Based on what 
Alice has told him, Bob chooses a measurement to make on his particle. In par- 
ticular, he applies the procedure for the optimal unambiguous discrimination of 
single qubit states to his particle. However, in this procedure one must know 
the two states that one is discriminating between, and it is this information that 
is provided by the result of Alice's measurement. 

What we wish to examine here is how restricting the classical communication 
between the parties affects their ability to discriminate between the states. We 
shall first see what happens when no classical communication is allowed. In 
that case each party has three possible measurement results, corresponding to 
l^'o), 1 corresponding to l^*!), and / for failure to distinguish. If |5'q) is sent, 
then Alice and Bob both measure or both measure /, so that they both know, 
without communicating, that |^o) was sent or that the measurement failed. If 
l^i) is sent, then they both measure either 1 or /. We shall then relax the 
ban on classical commuincation, and allow Alice and Bob to communicate their 
meaurement results to each other. However, conditional measurements will still 
be banned, i.e. situations in which the measurement made by one party depends 
on the measurement results of the other will not be allowed. 

One motivation for studying these situations, in addition to what they tell 
us about state discrimination, is their possible use in communication schemes. 
State discrimination for single qubits can be used to construct a scheme for 
quantum cryptography 0|. In this protocol, Alice and Bob wish to share a 
secure key. Alice sends single qubits to Bob in one of two nonorthogonal states, 
IV'o) or ^-iid Bob applies the unambiguous state discrimination protocol 

to the states he receives. He then tells Alice whether the procedure succeeded 
or failed, and they keep the instances when it succeeded and throw out the 
rest. If Bob's measurement resulted in {ipo), then that particular key bit is 
recorded as 0, and if it resulted in \tpi), it is recorded as 1. In this way a binary 
string shared by Alice and Bob can be constructed, and it serves as the key. 
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An eavesdropper, Eve, who intereepts the qubits that Ahce sends to Bob, and 
who wishes to find out which state they are in, has a problem. Because the 
states are not orthogonal, she will not be able to definitely determine the state 
each of each qubit she receives. However, she must send a qubit in cither |V-'o) 
or on to Bob. Since her information about the qubit she received is not 
perfect. Eve will sometimes send a qubit in the wrong state to Bob. If Alice and 
Bob publicly compare some of their key bits and find discrcpencics, then they 
know an eavesdropper was present. If they find no discrepencies, then they can 
conclude that they share a secure key. 

The no-classical-communication scheme would allow a third party, Charlie, 
to distribute a shared key to Alice and Bob. Charlie would send one qubit to 
Alice and one to Bob, where the qubits are either in the state |^o) or and 
Alice and Bob would measure them. They would both know when the had found 
|\E'o), when they had found l^l/i), and when they had failed. Note that Charlie 
would not know the key, because he would not know which bits corresponded to 
failure. A slight relaxation of the no-classical-communication condition allows 
all three parties to share a key. Alice and Bob simply announce publicly when 
they failed to distinguish the state. 

A possible use for the second scheme, when Alice and Bob are allowed to 
compare their meaurement results, is secret sharing. In this case a third party, 
Charlie, wants to share a secure key with Alice and Bob, but he wants Alice and 
Bob to have to cooperate to determine the key bit. Neither Alice nor Bob, sep- 
arately, will know the key, but together they will. Charlie accomplishes this by 
sending one qubit to Alice and another to Bob. The two qubits are either in the 
state I'I'o) or l^"!), and these states arc not orthogonal. Alice and Bob then per- 
form a procedure to determine which state they have, and this procedure must 
require their cooperation, so that neither of them by themselves can determine 
the state. If they use the optimal procedure in which the measurement Bob 
makes depends on the result of Alice's measurement, then Alice would measure 
her particle, and Bob would do nothing to his. When they want to determine 
the key bit, Alice will tell Bob the result of her measurement, and Bob will make 
the appropriate measurement on his particle. This method, however, requires 
Bob to store quantum information, i.e. keep his particle free from the effects 
of decoherence, until the bit is determined. A more practical procedure would 
be the restricted-classical-communication scheme in which both Alice and Bob 
make independent measurements, and are able to determine the state from the 
results. In that case, they each measure their qubit when they receive it, and 
they record the results of their measurements. This means that it is only clas- 
sical information that needs to be stored. Neither Alice nor Bob should be able 
to determine the state from just their own result, but by putting their results 
together they should be able to indentify the state they were sent with some 
nonzero probability, and they should never make an error. It is this kind of 
procedure we wish to study here. 
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2 No classical communication 



As discussed in the Introduction, we shall assume that Alice and Bob each has 

one of three measurement alternatives, 0, 1, and /. The POVM operators that 
characterize the measurements are {Aq, Ai, Af} for Alice and {Bq, Bi, Bf} for 
Bob. These operators satisfy 

Ia= J2 Ib= b]b„ (1) 

j=0,l,/ j=0,l,/ 

where Ia is the identity on TLa, the Hilbert space of Alice's qubit, and Is is the 
identity on Tis, the space of Bob's qubit. The requirement that Alice and Bob 
only get the same result for their measurements imposes the conditions 

AjBk\^n)=Q, (2) 

where j, k G {0, 1, /} and j ^ k, and n G {0, 1}. In addition, the fact that no 
errors are made in identitfying the states requires that 

AoBol^i) ^iBi|*o)=0. (3) 

It is clear simply from the number of conditions, that if this procedure is 
possible at all, it will be true only for a very restricted set of states. In fact, 
what we find is that the best we can do is to is to identify one of the states with 
a nonzero probability and fail the rest of the time. The details of the proof of 
this statement are given in the Appendix. 

We conclude this section with an example of the situation in which one state 
can be detected. Suppose our two states are given by 

l*o) = |0)|0) 

= -L(|0)|0) + |1)|1)), (4) 

where Alice's states are first and Bob's second. In addition, we have that Aq = 
Bq = 0, so that |\l/o) is never detected, and 

A, = \1){1\ B, = \1){1\ 

Af = \0){0\ i?/ = |0)(0|. (5) 

From this we see that, indeed, if |\l/o) is sent, then it will not be detected, but 
if l^"!) is sent, then we will detect it with a probability of 1/2 and fail with 
a probability of 1/2. Thus, we are very limited in distinguishing two states 
without any classical communication between Alice and Bob. 

3 Limited classical communication 

The situation becomes more interesting if we allow Alice and Bob to communi- 
cate the results of their measurements to each other only after both measure- 
ments have been made. We now consider the following situation. Alice and Bob 
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make measurements on their particles, and each of these measurements can have 
one of two outcomes, or 1. Alice's measurement is described by the POVM 
{^05 ^1} and Bob's by {Bo,Bi}, where 

Ia=AIAo + A{Ai Ib=bIBo + BIBi, (6) 

and Ia and Ib are the identity operators in Alice's and Bob's Hilbert spaces, 
respectively. The probability that Alice will obtain the result k if the two qubit- 
state is is Tr{pAjA'lAk), where pAj = TrB{\'^j){^j\) is the reduced density 
matrix of |\E'j) in Alice's space. Similar expressions hold for the probabilities of 
Bob's measurements. Note that ^0 and Ai commute with Bq and Bi. 

Together, Alice and Bob have four possible sets of results (Alice's result is 
given first, Bob's second), {0,0}, {0,1}, {1,0}, {1,1}, and we have to decide 
which sets correspond to 1^*0), which to IvPi), and which to failure to decide. Let 
us first consider what happens if wo assume that none of the sets corresponds 
to failure. In particular, suppose that {0,0} and {1, 1} correspond to jvl/o) and 
{0, 1} and {1,0} correspond to This implies that if the state is then 

the probability of getting {0,0} or {1,1} is zero, and if the state is \'^q), the 
probability of getting {0, 1} or {1, 0} is zero. Therefore, we have 

(*o|4^oBIBi|*o) = (*o|4^iS(5So|*o) =0 
(*i|4^oS($Bo|*i) = =0. (7) 

These imply the simpler equations 

AoBil^o) =AiBo|*o) =0 

AoBol^i) =^iSi|*i) =0. (8) 

If we now note that 

(*i|*o) = 0/b|*o) 

= (*i|(4Ao+4Ai)(g)(s5So + BlBi)*o), (9) 

we see from the previous equation that (^'ij^'o) = 0. Therefore, if we are able 
to distinguish the states every time without error, they must be orthogonal. 

Now let us suppose that some of the measurement results correspond to a 
failure to distinguish the states. We will focus on two different cases. In the 
first we shall assume that two of the four alternatives correspond to failure, and 
in the second we shall assume that only one does. 

3.1 Two failure states 

Let us assume that {0,0} corresponds to |^'o), {1, 1} corresponds to l^"!), and 
both {0, 1} and {1, 0} correspond to failure to distinguish. The condition of no 
errors implies that 

AoBo|*i)=0 ^iBi|*i) = 0. (10) 
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If we apply these conditions to Eq. (||) , we find that 

(*i|*o) = (*i|J^|*o), (11) 

where 

F = aIAoBIb, + A\A,bIBo. (12) 

Now let us examine the conditions in Eq. (|T^) in more detail. We first 
express I'i'i) in its Schmidt basis 

1 

l*i> =1] |fB,), (13) 

i=o 

where {vaot'^ai} and {vbo,vbi} are orthonormal bases for Alice's and Bob's 
spaces, respectively, and Xij for j = 0, 1 are the eigenvalues of the reduced 
density matrixes. The condition Aq-BoI^i) — then implies that 



y/\ioAo\vAo) Bo\vBo) = -\/XiiAq\vai) (E) Bo\vBi). (14) 

The only way this can be true is if v4o|wao) is parallel to Ao|wai) and Bq\vbo) 
is parallel to Bo\vbi)- Therefore, we can write 

Ao\vAo) = co\i]a) Bq\vbo) = do\riB) 

Ao\vAi) ^ ci\riA) Ba\vBi) ^ di\T]B), (15) 

where Cj and dj are constants and \\riA\\ = WvbW = 1- These equation imply 
that 

1 

^0 = ^Cj\t]a){vaj \ = \VA){rA\ 

j=0 

1 

Bo ^dj|?/i3)(wBj| = \VB){rB\, (16) 
J=0 



where 



1 1 
\rA) = J2 ^>^^') 1^^) = E (17) 

j=0 J=0 

The condition yloi?o|^i) = can now be expressed as 

i{rA\®{rBmi)=0. (18) 

We can now do the same thing with the condition that Ai_Bi|^o) = 0. 
Expressing |^'o) in its Schmidt basis we have that 

1 

l*0) =^ (19) 
3=0 
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where {uao,uai} and {ubo^ubi} are orthonormal bases for Alice's and Bob's 
spaces, respectively, and Aoj for j = 0, 1 are the eigenvalues of the reduced 
density matrixes. Applying the same reasoning as before, we find that 

Ai = \U){sa\ Bi^\^b){sb\, (20) 

where \\^a\\ — HCbII = 1- We also have that 

((saI® (sbDI^o) =0. (21) 

We can gain more information about the vectors l^^), \rB), \sa), and \sb) 
by substituting the results of the previous paragraphs into Eqs. (^. This gives 
us that 

lA^\rA){rA\ + \sA){sA\ lB = \rB){rB\ + \sB){sBl (22) 

Now let both sides of the first of these equations act on the vector jr^), 

\\rAf\rA) + \sA){sA\rA) = \rA). (23) 

The only way this can be true is if either \rA) is parallel to \sa) which violates 
Eq. (p2|), or if {saIta) = and \\rA\\ = 1- Therefore, \sa) is orthogonal to Ita), 
and both have norm 1. Henceforth, we shall denote \sa) by \r^), and we have 
that {rA,rA} is an orthonormal basis for Alice's space. Similarly, we find that 
{rB,rj^}, where \rg) = |sb), is an orthonormal basis for Bob's space. 

Now let us examine the failure probabilities. We first express the operator 
F, defined in Eq. (^ as 

F = i\rA)®\rj,))i{rA\®{rj,\) + {\ri)(d\rB)){{ri\^{rB\) 
= I-{\rA)(E)\rB)){{rA\<E){rB\) 

-{\ri)<E>\rj,m{ri\<E>{rj,\). (24) 

We first note that if Eqs. (|l8|) and (|2^) are satisfied, then the condition in Eq. 
( pi] ) is also satisfied. The failure probability if Charlie sends the state |4'o) is 
(*o|^'|*o), and if he sends the state I'^i), it is (^ilFl^-i). These probabilities 
can be expressed as 

(^ol^^l^'o) = l-|((rA|®(rB|)|^'o)P 

(vI/i|F|*i) = l-\{{ri\^{rim^)\'. (25) 

If each of the states is equally likely, then the total failure probability, pf, is 
given by 

P/-^((*o|J^|*o) + (*i|i^|*i>)- (26) 

We want to minimize this overall failure probability. 

Note that the failure probabilities are unaffected by the choice of the vectors 
\£.a), \£.b), Iva), and |?7s). If we make the choices 

\U) = \ri) \CB) = \rj,) 

\VA) = \rA) \VB) = \rB), (27) 
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then the operators Aj and Bj, where j = 1,2, are projections and the generahzed 
meausrement becomes a von Neumann measurement. 

Let us summarize our remaining problem. We want to find a basis for 
Ahce's space, {1?"^), k^)}, and one for Bob's space, l''^)}, that satisfy 

the conditions 

{{ri\^{rj,mo) = 

{{rA\^{rBmi) = 0. (28) 

We can reduce these conditions to the solution of several simple equations. 
First, expanding |r^) and \rj^) in terms of \uAj) and \uBj), respectively, we have 

1 1 
\ri)=J2e;\uA,) |r^) =E/;i"^^)- (29) 

3=0 j=0 

The equations in the previous paragraph become 
1 1 

y^^if] =0 y^cjdj = 0, (30) 

j=Q j=0 

while the conditions (r^jr^) — and (r^lrs) — become 

1 

ii j2=o 
1 

Y fj2 ^'"Bji I ) = 0- (31) 
ii,i2=o 

Now define the ratios 

^3 = 4 ^i = r- (32) 

If we now divide Eqs. ( |30| ) and (|l|) by the appropriate product of expansion 
coefficients, e.g. the first of Eqs. (|30|) is divided by eo/o and the first of Eqs. 
( ^ll ) is divided by cqCq, we find 

{VA0\UA0) + {VA0\UA1)Z3 
+ {vAl\uAo)z'l + (vAl\uAl)z'lz3 = 

{vbq\ubo) + {vbo\ubi)z4: 

+ {VB1\UB0)Z2 + {vBl\uBl)z2Zi = 0. (33) 



8 



Given two specific states |4'o) and l^*!), these equations can be solved to find 
the vectors [ta), Va)^ Vb), and \rg). 

Let us now consider two examples. In the first we shall suppose that |5'o) 
and l^*!) have the same Schmidt bases while in the second the Schmidt bases 
of the two states will be different. 

We begin by assuming that our two states are given by 

|*o) = cos6lo|00) +sin6'o|ll) 

= cos6'i|00) +sin6li|ll), (34) 

where Oq and 6i are both between and 7r/2. Solving Eqs. ( ^ ) for these states, 
we first find the condition tan 6*0 tan^i = 1, which implies that 6i — {it /I) — 6*0. 
We also find explicit expressions for the vectors 



\rA)^clm+z^\l)) 
\rB)^dl (|0)-^|1)) 

K>=eS f|0)--|l) 



^1 

kB> = /o(|0)+cot(?o^i*|l)), (35) 



where the normalization constants are given by 



2 



|2l|2 + (cot0l)2 

1 + \zi 
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The quantity zi is at the moment undetermined, but it will be fixed by requiring 
the failure probability to be a minimum. This probability is now given by 

^ _ kiP (l^(cotgi)^)^ (l-(tangO^)^ 

2 + 2|zi|2 l + (|zi|cot0i)2 l + (|zi|tan^?i)2' > 

where the condition 6q ~ (7r/2) — 9i has been used to eliminate 6*0. Setting the 
derivative of p/ with respect to jzip equal to zero, we find an equation that has 
only one positive solution, = cot6'i. Substituting this value into Eq. (^7|), 
we find 

Pf = sin(26'i) (38) 

This failure probability should be compared to that when a single joint 
measurement can be performed on both qubits of the two-qubit states. In that 
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case, if each of the states is equahy hkely, then the probabiUty of faihng to 
distinguishing the states is given by the IDP hmit 

= K^-ol*!)! =sin(20i). (39) 

Note that this expression is identical to that given in the previous paragraph. 
Therefore, in this example we can conclude that the failure probability that is 
achieved by measuring the qubits separately is the same as that when the qubits 
are measured together. 

Now let us see what happens if the states have different Schmidt bases. We 
shall keep j^E'o) as before, but choose differently, 



l^*!) = COS( 



ll-o) -cos6lo|00>+sin6lo|ll) 

- x) \ + x) + sin 9i \ — x) \ ~ x) , 



(40) 



where | ±a;) = (1/V2)(|0) ± |1)). Solving Eqs. (|3|) for these states, we first find 
a quadratic equation for zi 

(1 - cot^o)^! - (1 - cot 6*1) (1 + cot 6*0)21 - (1 - cot 6*0) cot 6*1 = 0. 



The vectors making up the POVM are given by 



\rA) 
\rB) 
\ri) 
\rB) 



Cod +x) +zi\ -x)) 
cot 9i 



zi 



eS(|0) + 23|l)) 

/o(io)-^|i; 



The normalization constants are given by 
, 1 



|co| 



l + |zi| 
2 



|eo| 



\do\' = 



|2i 



+ cot^ 



|z3|^+COt^eo' 



where 



Z3 = 



1 - cot 6*0 cot 01 + {1- cot eo)zl 



1 - cot 6*1 

The failure probability is given by Eqs. (p5[) and 



where 



l^ipsin^^o 



4(l + |zi|2)(|zi|2 + cot^ 0i) 

2 



\{{rA\^{rB\)^,)\' = 

(1 + cot 6*0) (1 - cot 6*1) + (cot - 1) ( Zi* 

|((ri|®(r^|)vI/o)P = 



cot Oi 



i ® *0 P = ^1 '12' I 13 1 ,2n , 

4(1 + |z3|2)(|zi|'^ + cot^ 6*0) 



(1 + cot6'i)(l - cot6lo) + (cot 01 - 1) U3 



cot 6* 

Z3 



(41) 



(42) 



(43) 
(44) 



(45) 
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Specializing to the case 9q = tt/2 wc find that there are two sets of vahies 
for Zi, . . .Zi. One set is obtained from the other simply by reversing the roles of 
\rA) and Ir^), and both give the same failure probability, so that we need only 
consider one of them. Doing so we have that 

Zi — cot 9i Z2 = —1 

= ^^t^ = 
This gives a value for the failure probability of 

(1 - cot 6'i)2 + (cos 6*1 cot 6*1 - sin 6*1)2 

= ' A{i + coee,) • ^^'^ 

This can be compared to the failure probability when both qubits are measured 
together, which corresponds to the case considered by Ivanovic, Dieks and Peres 

Pfrdp = |(«'o|*i)| = i(sin6ii +cos0i). (48) 

These probabilities are plotted as a function of ^lin Fig. 1, and it can be seen 
that, as expected, pf > pfidp- The probabilities are equal at some isolated 
points, but, in general, there is a cost, which manifests itself as a higher failure 
probability, associated with determining the state by performing independent 
measurements on the two particles. This example diflFers from our previous one 
in that here there is a difference betwecin pf and pfidp, whereas there is none 
when the two states we are trying to distinguish share the same Schmidt basis. 



3.2 One failure state 

Let us now consider the case in which only one of the four measurement al- 
ternatives corresponds to failure. In particular, suppose that {0,0} and {1, 1} 
correspond to \^o), {!> 0} corresponds to and {0, 1} corresponds to failure. 
We now have the conditions for our POVM operators 

AoBo|*i)=0 ^iSi|*i)=0 
AiBo|*o)=0. (49) 

Using the same methods as before, we find that 

Ao = \rA){rA\ Ai = \ri){ri\ 

Bo = \rB){rB\ B, = \r^){r^\. (50) 

Where we previously had two conditions on the orthonormal bases Ij'a)} 
and {Irs), we now have three 

({taI O (rsD^-i) = ((ril «) (r^|)*i) = 
((ri I ®(rB |)*o)=0. (51) 
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Figure 1: Failure probabilities plotted as a function of the angle di. The solid 
curve is pf and the dotted is pfidp- In this case the restriction on classical 
communication causes an increase in the failure probability. 

Let us now consider an example. Let us assume that the states we are 
trying to distinguish are given by Eq. , that is they have the same Schmidt 
basis. Employing the same methods and notation as before, we find first that 
6i — — 7r/4, and that 

Zl = —zl = \/ tan 

Z2 = -zl = Vcot^o (52) 
The failure operator, F is now 

F = A\A^B\Bi = \rA){rA\ ® (53) 

where 

|'-> = (tti3^)"'<i°> + ^^|i» 

If both states are equally probable, then the failure probability for this procedure 
is given by 

VS - i((vI/o|F|*o) + (vI'i|F|*i)) 

= i(cos(?o-sin^^o)' + J. (55) 

This probability and p/idp are plotted as a function of as a function of {9i 
has been set equal to — 7r/4) in Fig. 2. 
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Figure 2: Failure probabilities plotted as a function of the angle 6*0 for the case 
of one failure state. The solid curve is p/ and the dotted one is Pfidp- 



4 Secret sharing 

There have been a number of theoretical proposals for quantum secret sharing, 
and one experimental demonstration. The proposals fall into two categories. In 
the first, quantum mechanics is used to securely distribute a classical shared 
key. One of these protocols is based on the use of GHZ states and another 
makes use of pairs of Bell states in different bases [||. An experiment based 
on the GHZ state protocol was carried out by Tittel, Zbinden and Gisin JTof . 
The second category consists of protocols in which the secret information that 
is split among several parties is quantum information pT[ . The procedure we 
are considering here is of the first type. 

Let us suppose that a third party, Charlie, sends one of two states to Alice 
and Bob, one qubit to Alice and one to Bob, 

l^-o) = sin6i|00) +cos6i|ll) 

l^-i) = cos6l|00) +sin6'|ll). (56) 

The procedure we are discussing here is based on the first example in the pre- 
ceding section. Initially we shall suppose that Alice measures her state in the 
basis given by 

1 

\rA) = 



(l + cot.)V. ('»^+^'^» 
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and that Bob measures his particle in the basis 



\rB) 



1 



(|o) - V^|i)) 



(l + cot 6*) 1/2 




1 



(|0) + 



(58) 



(1+ tan 61)1/2 



By comparing their measurement results, Alice and Bob can determine what 
state CharHe sent, or that the procedure has failed. Individually, however, they 
will not be able to make this determination. Hence, Alice and Bob together will 
share a key with Charlie, individually they will not. 

Let us now examine the security of this scheme with regard to eavesdrop- 
ping, and we will quickly see that we have to modify the simple procedure in 
the previous paragraph. The reason is that an eavesdropper, Eve, has a perfect 
cheating strategy. Eve simply captures the particles, and performs the same 
measurement on them that Alice and Bob would perform. She then sends par- 
ticles to Alice and Bob consistent with her measurement results. For example, 
if she finds Ir^) and jra), she knows the state is |^'o), and she sends a particle 
in |r^) to Alice and a particle in Irs) to Bob. Using this approach. Eve will 
know the key and Alice, Bob, and Charlie will not be aware of her presence. 

This strategy of Eve's can be eliminated if Alice and Bob sometimes measure 
in the {0, 1} basis. Each of them chooses randomly, with some predetermined 
probability, in which basis to measure. When they compare their results, they 
look at the instances in which they both measured in the {0, 1} basis, to see 
if their results were ever different. If they were, they can conclude that an 
eavesdropper was present. This defeats the attack proposed for Eve in the 
previous paragraph, because while the states |^'o) and 15*1) have no components 
along the vectors |01) and |10), states such as \rA)\TB) do. That means that in 
order to avoid detection. Eve must send states lying in the subspace spanned 
by 1 00) and |11), which also means that she will not be able to control the 
results that Alice and Bob get. This leads to her detection. When she measures 
the state she receives from Charlie and fails, then she has to guess which state 
to send on to Alice and Bob. Sometimes she will guess incorrectly, and if 
Alice, Bob and Charlie publicly compare some fraction of their data, they will 
notice discrepecies, e.g. Charlie will have sent |\E'o), but Alice and Bob will have 
detected I'I'i). These discrcpcncies would not exist if Eve were not present, and 
their presence gives her away. 

Next, let us see whether this procedure protects against cheating. Suppose 
that Bob is able to capture both qubits sent by Charlie. He first chooses a basis. 
If it is {0, 1}, he sends a particle to Alice in one of these two states, and throws 
out the two-qubit state from Charlie (because of his basis choice the results 
from this state will not contribute to the key) . When it comes time to compare 
results with Alice, if Alice measured the particle Bob sent in the other basis, the 
results are thrown out, and if she also measured in the {0, 1} basis. Bob simply 
announces the result corresponding to the particle he sent her. If Bob chose 
to measure in the {rA,r-^} and {rB,T^} bases, then, if he finds |\l/o) he send 
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Alice |r^), if l^'i), he sends \r^), and if he fails he sends either |r^) or If 
this is one of the results that is publicly compared, then if Bob's measurement 
succeeded, he announces the same state as the one he sent to Alice, and if it 
failed, the opposite state. Using this method, he knows the key bits, and Alice 
and Charlie do not know that he knows. 

It is possible to fix this somewhat if instead of sending the particles to 
Alice and Bob simultaneously, Charlie first sends one particle to one party, who 
measures it and tells Charlie over a public channel that he or she has received 
and measured the particle. Charlie alternates sending the first particle to Alice 
and Bob. Now, supposing as before that Bob is the cheater, let us sec what 
happens when the particle is sent to Alice first. Bob grabs the particle that has 
been sent to Alice, but then he must send her a substitute. If he sends her a 
particle in one of the states |0) or there is no problem, but he cannot do this 
all of the time, because then no key bits would be generated. If he sends her 
a particle in either |r^) or |r^), he can run into a difficulty. Suppose he sent 
her \rA), and when he receives the second particle from Charlie, he finds that 
the state Charlie sent was which should correspond to Alice measuring 

\r;^). If he is to avoid creating a detectable error, he must claim, if this is one 
of the bits which is publicly revealed, that he measured which corresponds 
to failure to distinguish. This, however, means that there will be more cases 
of failure to distinguish than there should be, and Alice and Charlie would be 
alerted to the fact that the security of the key is questionable. 

Instead of sending Alice a single paricle in a specific state, Bob can send Alice 
one of two particles in a singlet state. This, however, does not help him. Prom 
the particle remaining in his posession, he cannot determine which measurement 
Alice made, because his particle could be in one of four possible states, and these 
cannot all be orthogonal. 

In summary, the procedure outlined here provides protection against eaves- 
dropping, and some protection against cheating. The presence of an eavesdrop- 
per leads to errors (misidentification of states) while the presence of a cheater 
leads to an increased failure rate. 

5 Conclusion 

We have examined the problem of distinguishing between two two-qubit states 
without error by using local measurements and either no or limited classical 
communication. In the first case we found that only one of the two states can 
be identified, the other generates a failure indication. In the second case, for 
some pairs of states it is possible to identify the states with the lowest possible 
failure probability (the IDP limit), and for others the failure probability with 
limited classical communication is higher than the optimal value. Finally, we 
proposed a secret sharing scheme based on the procedure using limited classical 
communication. 

Natural generalizations of this work are to higher dimensions, to more than 
two states, and to states with more than two particles. Many of our results 
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rely explicitly on the fact that we are considering qubits, and the extension to 
qudits is not straightforward. For example, we found that with bipartite qubit 
states it is not possible to distinguish two non-orthogonal states without using 
classical communication. We could tell if we had one of the two, but if the other 
state was sent our procedure would always fail. However, if we consider qutrits, 
whose basis states are |0), |1), and |2), then the two bipartite states 

1*0) ^ _L(|0)|0) + |2>|2)) 

l*i> - -^(|1)|1) + |2>|2)), (59) 

which are not orthogonal, can be distinguished without classical communica- 
tion. Measuring in the basis {|0), |1), |2)}, Alice and Bob will always obtain 
the same result, and if they obtain |0), they know that |5'o) was sent, if they 
obtain |1), then \'i>i) was sent, and if they obtain |2), then they have failed. 
The extension to more than two states also introduces new elements. For ex- 
ample, Ghosh, et al. have shown that it is not possible to deterministically 
distinguish cither three or four orthogonal two-qubit states using only local op- 
erations and classical communication |l^ . This suggests that there is much still 
to be learned about distinguishing multipartite states using local operations and 
classical communication. 
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Appendix 

We now want to show that if no classical communication is permitted, then at 
most one state can be identified. We begin by using the conditions on the states 
and POVM operators to derive additional, simpler ones. For example, we have 
that 

AoSo|*i)=0 AoBi\^i)=0. (60) 

Acting of the first of these with bI , the second with , adding, and making 
use of Eq. (||), we find that 

= AoilB-B}Bf)\^i) 

= ^o|*i), (61) 

where, in going from the first to the second line, we noted that AoBf\'^i) — 0. 
Similarly we find that 

Bo|*i)=0 ^i|*o)-0 

Si|*o>-0. (62) 
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The next step is to express the states where j = 0, 1, in terms of their 
Schmidt bases (see Section III) 

1 

1 

= (63) 

Apphcation of the two conditions on in the previous paragraph imply: 

i. If Aio ^ and An ^ 0, then ^ol^'Aj) = 0, for j = 0, 1, and this implies that 

Ao =0. We also have that Bq = 0. 

ii. If one of the Aij's is zero, and we can assume, without loss of generality, that 

All = 0, then we have that AqIwao) = Bo\vbo) = 0. 

Similarly, the two conditions on I^Po) give us: 

iii. If Aoo ^ and Aqi ^ 0, then Ai = Bi = 0. 

iv. If Aoi = 0, then Ai|uao) = -Bil^so) = 0. 

Wc now have a number of cases to examine. If conditions («) and {iii) are 
true, the only nonzero operators are the failure operators, so that the procedure 
fails all the time. If conditions (ii) and (iv) are satisfied we have that the POVM 
operators Aj and Bj must be of the form 

Ao = \U){vAi\ Bo = \^b){vbi\ 

Ai = \r]A){uAi\ Bi = \r]B){uBi\, (64) 

where the vectors \^a), \^b), Iva), and |?7b) are as yet undetermined. 

We now examine the consequences of the conditions Ao-B/|^o) = and 
= 0, or 

Ao\uAo} Bf\uBo) = 

Ai\vAo)^Bf\vBo)=0. (65) 

The first of these equations implies that either {vAi\uAa) ~ 0, which further 
implies that, up to a constant of modulus one, \vao) — \uao), or that Bf\uBo) = 
0. If the first alternative is true, then both Aq and Ai acting on either vector I^Pj ) 
gives zero, and the measurement always fails. If this alternative is to be avoided, 
then we must have Bf\uBo) — 0. However, the second equation tells us that, 
if the measurement does not always fail, that Bf\vBo) = 0. These conditions 
imply that (assuming that |iiBo) 7^ h-'Bo); if this is not true the measurement 
always fails) Bf = 0. We then have that Ib = BqBq + i?|-Bi, which can only 
be true if \vbi) = \ubo) or \vbo) = \ubi), so that (\I/o|*i) = 0. Sumarizing, 
we can say that if {ii) and {iv) are satisfied, which implies that |^'o) and 
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are product states, then cither they are orthogonal, or the measurement always 
fails. 

Finally, let us see what happens if (i) and (iv) are true (the final alternative, 
(a) and {iii) being true is equivalent). This implies that Aq — Bq — 0, so 
that |\['o) is never detected, and that |5'o) is a product state. Using techniques 
similar to those in the previous paragraphs, we find that 

A-i = \riA){uAi\ Bi = |77b)(usi| 

Af^\U){uAo\ Bf^\^B){uBo\, (66) 

where the vectors \£,b), \va), and \r]B) are undetermined unit vectors. 

The final conditions are given by using the above expressions in the equations 
= and = to give 

((uAil «) (mso|)|*i) = 

((wAol® = 0. (67) 

An example satisfying these conditions is given in Section II. 

References 



[1] 

[2] 
[3] 
[4] 

J5 



I. D. Ivanovic, Phys. Lett. A 123, 257 (1987). 
D. Dieks, Phys. Lett. A 126, 303 (1988). 
A. Peres, Phys. Lett. A 128, 19 (1988). 

J. Walgate, A. Short, L. Hardy, and V. Vedral, Phys. Rev. Lett. 85, 4972 
(2000). 



S. Virmani, M. F. Sacchi, M. B. Plenio, and D. Markham, quant 



ph/0102073 



[6] Yi-Xin Chen and Dong Yang, Phys. REv. A 65,022320 (2002). 

[7] C. H. Bennett, Phys. Rev. Lett. 68, 3121 (1992). 

M. Hillery, V. Buzek, and A. Berthiaume, Phys. Rev. A 59,1829 (1999). 

[9] A. Karlsson, M. Koashi, and N. Imoto, Phys. Rev. A 59, 162 (1999). 

[10] W. Tittel, H. Zbinden, and N. Gisin, Phys. Rev. A 63, 042301 (2001). 

[11] R. Cleve, D. Gottesman, and H. -K. Lo, Phys. Rev. Lett. 83, 648 (1999). 

[12] S. Ghosh, G. Kar, A. Roy, D. Sarkar, A. Sen(De), and U. Sen, Phys. Rev. 
A 65, 062307 (2002). 



18 



